SSL Certificate Analysis for eic.sideload.us - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt

Certificate Information

Subject

CN=maricopa.democrat

Issuer

C=US, O=Let's Encrypt, CN=R12

Valid From

May 01, 2026

Valid Until

July 30, 2026 77 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

51:D1:75:F3:2E:09:64:BD:97:59:21:05:44:79:51:04:05:4A:56:B2:31:04:53:D2:99:8F:79:AE:9D:96:F4:22

Alternative Names

89 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains

sideload.us *.sideload.us *.admin.sideload.us *.api.sideload.us *.askkrm.sideload.us *.b00f0990-e5be-4a4f-9ecc-a72a5ef3a6ea.sideload.us *.blog.sideload.us *.crm.sideload.us *.demo.sideload.us *.e8daa46c-957a-4622-8e96-6013f081fb53.sideload.us *.eic.sideload.us *.erec.sideload.us *.gate.sideload.us *.help.sideload.us *.hostmaster.sideload.us *.lime.sideload.us *.m.sideload.us *.mail.sideload.us *.root.sideload.us *.server.sideload.us *.shop.sideload.us *.sitemap.sideload.us *.sitemaps.sideload.us *.smtp.sideload.us *.staging.sideload.us *.zimbra.sideload.us

Other domains in certificate

3shinestar.info *.3shinestar.info *.ww38.3shinestar.info

*.70mmsex.adulttopless.com adulttopless.com *.adulttopless.com

appdb.cc *.appdb.cc *.forum.appdb.cc *.hotfix.appdb.cc *.kafka.appdb.cc *.status.appdb.cc *.t-mobile.appdb.cc

*.1ovv.ieschennai.com *.2etnhy.ieschennai.com *.3cwrqe.ieschennai.com *.4s14lm.ieschennai.com *.79znis.ieschennai.com *.7aucf2.ieschennai.com *.a4k3.ieschennai.com *.aags.ieschennai.com *.bhiv.ieschennai.com *.cgphx.ieschennai.com *.cqgw0.ieschennai.com *.cv2o.ieschennai.com *.esce1.ieschennai.com *.fy6b.ieschennai.com ieschennai.com *.ieschennai.com *.iwo291.ieschennai.com *.lt8y.ieschennai.com *.mmhx.ieschennai.com *.mv52hz.ieschennai.com *.mw38oi.ieschennai.com *.mx.ieschennai.com *.o9nvv.ieschennai.com *.qqu2l.ieschennai.com *.rc19.ieschennai.com *.support.ieschennai.com *.viy105.ieschennai.com *.voo7ty.ieschennai.com *.xhnyw.ieschennai.com *.yr8t.ieschennai.com *.za9q17.ieschennai.com *.zxgb.ieschennai.com